Static task
static1
Behavioral task
behavioral1
Sample
0bd4f818849d74b2ae95feb88fcfe476.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0bd4f818849d74b2ae95feb88fcfe476.exe
Resource
win10v2004-20231215-en
General
-
Target
0bd4f818849d74b2ae95feb88fcfe476
-
Size
28.2MB
-
MD5
0bd4f818849d74b2ae95feb88fcfe476
-
SHA1
1f7877cd318295b799582ee629b64a130cdd356f
-
SHA256
e3d48005ce5b3cd3ef49ba4ed1b970c478cec756a2c5374a4c6ef5217ad840a6
-
SHA512
b9d4106362588fbb07f10950f3efa2d3efb8dcaa9e19b3a3be5e1f7444e2c1db85c7d5ac23d0993780b9cedf545f20f423020691ab2cf9b88a5b6c750db07190
-
SSDEEP
196608:GBnuC1EsQhhE6GbZlaNeHMauzE1vmv/+p+OCtAmkAe6L5m0Xz:GBuCvlVfa3Ia/+7gAmvF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0bd4f818849d74b2ae95feb88fcfe476
Files
-
0bd4f818849d74b2ae95feb88fcfe476.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.data Size: 27.4MB - Virtual size: 27.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 808KB - Virtual size: 808KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ex_cod Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE